[Git][security-tracker-team/security-tracker][master] Add CVE-2025-31492/libapache2-mod-auth-openidc

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
36c8bee6 by Salvatore Bonaccorso at 2025-04-08T20:50:58+02:00
Add CVE-2025-31492/libapache2-mod-auth-openidc

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -582,7 +582,9 @@ CVE-2025-3314 (A vulnerability has been found in SourceCodester Apartment Visito
 CVE-2025-32013 (LNbits is a Lightning wallet and accounts system. A Server-Side Reques ...)
 	NOT-FOR-US: LNbits
 CVE-2025-31492 (mod_auth_openidc is an OpenID Certified authentication and authorizati ...)
-	TODO: check
+	- libapache2-mod-auth-openidc <unfixed>
+	NOTE: https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-59jp-rwph-878r
+	NOTE: Fixed by: https://github.com/OpenIDC/mod_auth_openidc/commit/b59b8ad63411857090ba1088e23fe414c690c127 (v2.4.16.11)
 CVE-2025-31488 (Plain Craft Launcher (PCL) is a launcher for Minecraft. PCL allows use ...)
 	NOT-FOR-US: Plain Craft Launcher (PCL)
 CVE-2025-2260 (In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before   ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36c8bee613817de62792f0c7824adec74c6dfa0d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36c8bee613817de62792f0c7824adec74c6dfa0d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250408/acc8cebf/attachment-0001.htm>